Google Patches Exploited Pixel Devices Dual Zero-Day Vulnerabilities

Google revealed two Pixel phone vulnerabilities: an information disclosure issue (CVE-2024-29745 [CVSS 7+]) in the bootloader and an elevation of privilege flaw (CVE-2024-29748) in the firmware.oogle pixel devices. Forensic firms exploited these vulnerabilities to access device memory. Google has addressed both issues. One by erasing memory during the fastboot process and the second by fixing firmware to secure factory resets.